Answers to Vendor Questions .docx
DOCX document 17 KB Posted
- Attached to
- CIO Microsoft Sentinel Implementation FY26
- Solicitation number
- W91QF026QA015
About this file
This document is a Answers to Vendor Questions file providing clarifications on technical and contractual requirements for the Microsoft Sentinel implementation solicitation W91QF026QA015.
The requirement is for Microsoft Sentinel implementation services on the Azure Commercial Cloud using the Government's existing MS 365 A5 tenant in USA East region. Offerors should assume a greenfield deployment with no migration of existing detection rules, historical logs, or dashboards required. The Azure consumption assumptions for pricing include 24 GB/day analytics tier, 55 GB/day data lake tier, 6-month searchable/hot retention, 12-month archived/cold retention, 10 hours/month advanced data insights, and 100 monthly searches and queries at 2 GB per data lake query and 105 GB per search job. The Government currently provides MS 365 A5, Defender, Entra, and Intune licensing with no additional contractor-provided licensing expected; however, if additional licensing is required, the Government will procure it through their Microsoft support partner. Azure consumption costs for the full 12-month period are included in the firm-fixed price under CLIN 0001, with a not-to-exceed limit of $4,000 per month, invoiced monthly based on actual usage validated against Azure billing reports. The contractor is responsible for implementing the solution to meet a 98% data ingestion success rate for approximately 350 endpoints and specified M365 data sources while complying with NIST SP 800-53 and OMB M-26-14 requirements. The project implementation schedule will be developed after award and must be submitted within 10 days of contract award per Deliverable T.004.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Solicitation Amendment W91QF026QA0150002 SF 30.pdf | ||
| Product Specifications.docx | DOCX document | |
| Performance Work Statement.docx | DOCX document | |
| Answers to Vendor Questions Part 2.docx | DOCX document | |
| 52.212-1 52.212-2_CIO Microsoft Sentinel.docx | DOCX document | |
| Solicitation Amendment W91QF026QA0150001 SF 30.pdf | ||
| Solicitation - W91QF026QA015.pdf | ||
| PWS MS Sentinel Implementation_ Rev. 2.docx | DOCX document | |
| Product_Specs_CIO MS Sentinel Implementation.docx | DOCX document | |
| CLIN Structure_MS Sentinel FY26.xlsx | XLSX spreadsheet | |
| 52.212-1 52.212-2_CIO Microsoft Sentinel.docx | DOCX document | |
| BNJ_MS Sentinel Implementation FY26_KO_COR Signed_Redacted.pdf | ||
| Performance Work Statement.docx | DOCX document | |
| BNJ_MS Sentinel Implementation FY26_KO_COR Signed.pdf | ||
| Solicitation - W91QF026QA015.pdf | ||
| Wage Determination.docx | DOCX document |
Show all 16
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
1. Please identify the Azure/Sentinel licensing and consumption assumptions offerors should use to develop comparable firm-fixed pricing, including anticipated data ingestion volume, retention requirements, and any existing Government-provided licensing or entitlements.
· Cloud Scope (Azure Commercial or Gov): Commercial – Education licensing
· Azure Region: MS365 Tenant – USA à East
· Analytics Tier: 24 GB /day
· Data Lake Tier: 55 GB/day
· Searchable/Hot retention: 6 Months (Standard should follow the “Optimal Tier” for M-26-14 which recently replaced M-21-31.)
Archived/Cold retention: 12 Months (Standard should follow the “Optimal Tier” for M-26-14 which recently replaced M-21-31.)
· Advanced Data Insights: 10 hours/month
· Searches & Queries: 100 per month
· Data scanned per query for Data Lake queries: 2 GB
· Data scanned per query for Data Lake search Job: 105 GB
2. Please confirm which Microsoft 365 A5, Defender, Entra, Intune, and related Microsoft security licenses are currently Government-provided and available for use under this requirement, and identify any licenses the Contractor is expected to provide.
Customer has MS 365 A5 which includes all advanced licensing feature for Defender, Entra, and Intune. No additional licensing from the contractor is expected. If additional licensing is required to execute elements of the PWS, contractor will notify the government who will procure licensing through their current MS support partner.
3. Please confirm whether ongoing Microsoft Sentinel/Azure consumption for the full 12-month period of performance is to be included in the Contractor's firm-fixed price under CLIN 0001, or whether the Contractor is responsible only for estimating/configuring consumption as part of the implementation.
NTE $4000/month. Monthly invoices paid based on actual usage and validated against Azure billing/usage reports.
4. Technical Exhibit B identifies several deliverable dates as "as defined in the approved Project Schedule." Please confirm whether offerors are expected to submit a proposed implementation/project schedule with their quotation or whether the schedule will be developed after award.
Schedule will be developed after award according to (Deliverable T.004) in task one. Schedules will be submitted within 10 days of award.
5. Please identify the current SIEM platform and confirm whether the requirement includes migration of existing detection rules, historical logs, dashboards, incident data, or other configurations from the existing SIEM into Microsoft Sentinel.
The offeror should assume to be green fielding this solution, there is no requirement for dashboard, detections, or logs migration.
File details come from the government source that posted it. Updated .